$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40116de0-9ea5-3ce9-8529-cdcfaa871c57.roa File: 40116de0-9ea5-3ce9-8529-cdcfaa871c57.roa (raw, json) Hash identifier: x9f6wqxiIeyUlNYApY4Qy+BSM6REQkFaPbCWcpSUTWw= Subject key identifier: 8C:6B:B9:EB:4B:9C:32:1C:F7:B0:05:91:00:BE:AB:30:06:F1:8C:9F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858499F24C3CD8CBDA57E2F579C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40116de0-9ea5-3ce9-8529-cdcfaa871c57.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396570 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:c3:cd:8c:bd:a5:7e:2f:57:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=7f56a20e-ee38-4c80-b8fa-0bbdfcdf0d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:42:58:10:64:a5:87:be:ed:ae:76:e3:fe:5f: a2:24:5e:8b:d8:a5:06:7c:6e:bb:e6:21:68:55:c0: 36:b1:64:c6:8a:48:9e:cb:ea:cc:77:49:5c:a6:42: 3b:1e:27:01:92:0d:b4:b4:f4:f2:b9:54:c6:53:5c: 5f:fa:e9:fb:aa:3a:9e:0e:0d:f3:41:35:a5:ba:37: cd:db:95:0a:f3:36:89:6c:20:da:01:6d:82:06:8b: d4:a7:1c:fd:a2:fa:4f:4b:03:2c:ec:ff:a2:55:66: 14:e6:12:51:53:48:a2:d7:38:d7:c3:e8:06:c1:92: 20:df:6c:26:6f:a9:7d:73:21:66:7b:6d:0c:1b:fa: 78:46:fc:5f:8e:b4:52:7b:fd:74:17:9c:f0:c9:8a: 2b:6e:e1:2a:ff:4c:ae:2d:fe:20:3a:10:ee:27:b0: 1b:4f:18:97:23:0a:5b:4c:4d:0e:8f:87:12:87:bf: 0c:14:2c:67:6b:48:a4:bb:e3:f8:30:4e:75:72:db: 65:32:64:39:03:ee:51:16:b5:c0:08:96:5d:9d:31: dd:95:9a:18:47:6a:61:7d:d7:6e:6b:5e:5d:23:a4: 9d:8f:1c:c4:c9:88:0d:e0:d3:ae:ab:f8:98:60:73: 66:0a:0b:d9:87:6e:4e:c0:94:b1:c8:79:03:b2:01: 5a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:6B:B9:EB:4B:9C:32:1C:F7:B0:05:91:00:BE:AB:30:06:F1:8C:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40116de0-9ea5-3ce9-8529-cdcfaa871c57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:a0:a6:1e:6c:de:07:96:65:2c:bc:de:86:7c:f1:2c:a0:d8: 66:6e:66:2a:27:92:99:20:4c:70:1e:d5:9a:6f:76:50:4b:46: 72:d3:69:1a:a5:0c:22:de:57:7e:7f:54:3e:12:b9:8f:e6:bb: ee:98:fe:f0:b2:a6:06:f5:5b:c4:15:34:8e:2a:2e:53:c9:5a: 5c:14:b7:d6:02:b0:d8:0e:28:f2:71:1b:4c:42:72:50:af:df: ec:54:3c:d1:27:fa:15:54:06:7b:76:51:f4:ba:4d:8a:32:8b: 4e:42:f9:85:04:76:11:d2:08:f8:42:76:9c:1c:55:0b:fd:f6: 92:79:a8:d6:15:73:9d:f2:34:73:67:15:4e:2d:ed:99:f1:a7: 88:f7:17:bb:49:91:ac:74:1d:90:9d:74:aa:e7:5d:1a:e0:8e: e2:5e:da:a3:25:df:ca:f5:7e:2c:10:80:4a:6b:c5:92:e1:35: 8d:fa:71:2b:0b:59:7f:e0:95:c9:e8:34:6d:ea:60:39:70:a1: 90:1c:db:dd:5a:1e:0d:fc:12:60:11:c9:e7:73:78:fc:39:05: 77:05:72:3c:09:24:04:c4:c0:44:f8:6d:1c:f5:fa:d0:df:3f: 32:ca:ba:1e:ed:18:4b:e1:42:89:c6:a3:32:e8:48:28:d2:28: 4c:6f:68:44 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmfJMPNjL2lfi9XnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk N2Y1NmEyMGUtZWUzOC00YzgwLWI4ZmEtMGJiZGZjZGYwZDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUJYEGSlh77trnbj/l+iJF6L2KUGfG675iFo VcA2sWTGikiey+rMd0lcpkI7HicBkg20tPTyuVTGU1xf+un7qjqeDg3zQTWlujfN 25UK8zaJbCDaAW2CBovUpxz9ovpPSwMs7P+iVWYU5hJRU0ii1zjXw+gGwZIg32wm b6l9cyFme20MG/p4RvxfjrRSe/10F5zwyYorbuEq/0yuLf4gOhDuJ7AbTxiXIwpb TE0Oj4cSh78MFCxna0iku+P4ME51cttlMmQ5A+5RFrXACJZdnTHdlZoYR2phfddu a15dI6SdjxzEyYgN4NOuq/iYYHNmCgvZh25OwJSxyHkDsgFadwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIxruetLnDIc97AFkQC+qzAG8YyfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDAxMTZkZTAtOWVhNS0z Y2U5LTg1MjktY2RjZmFhODcxYzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBuoKYebN4HlmUsvN6GfPEsoNhmbmYqJ5KZIExw HtWab3ZQS0Zy02kapQwi3ld+f1Q+ErmP5rvumP7wsqYG9VvEFTSOKi5TyVpcFLfW ArDYDijycRtMQnJQr9/sVDzRJ/oVVAZ7dlH0uk2KMotOQvmFBHYR0gj4QnacHFUL /faSeajWFXOd8jRzZxVOLe2Z8aeI9xe7SZGsdB2QnXSq510a4I7iXtqjJd/K9X4s EIBKa8WS4TWN+nErC1l/4JXJ6DRt6mA5cKGQHNvdWh4N/BJgEcnnc3j8OQV3BXI8 CSQExMBE+G0c9frQ3z8yyroe7RhL4UKJxqMy6Ego0ihMb2hE -----END CERTIFICATE-----Generated at Sun Apr 27 02:40:03 2025 by rpki-client